Lucene search
+L

31 matches found

OSV
OSV
•added 2023/03/17 4:15 a.m.•17 views

AZL-25662 CVE-2023-28531 affecting package openssh for versions less than 8.9p1-5

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS7.4AI score0.02267EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/17 4:15 a.m.•10 views

DEBIAN-CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS7.4AI score0.02267EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/17 4:15 a.m.•59 views

CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS9.3AI score0.02267EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2023/03/17 4:15 a.m.•536 views

CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS7.4AI score0.02267EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/17 12:00 a.m.•1 views

CVE-2023-28531: Improper Access Control

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS7.8AI score0.02267EPSS
SaveExploits0References6
Fedora
Fedora
•added 2023/02/25 3:47 a.m.•20 views

[SECURITY] Fedora 37 Update: ksshaskpass-5.27.1-1.fc37

A ssh-add helper that uses kwallet and kpassworddialog...

1.5AI score
SaveExploits0
OSV
OSV
•added 2021/12/16 5:15 a.m.•12 views

CVE-2021-45099

The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...

8.8CVSS6.8AI score
SaveExploits0References2
Fedora
Fedora
•added 2021/03/20 12:20 a.m.•28 views

[SECURITY] Fedora 34 Update: ksshaskpass-5.21.3-1.fc34

A ssh-add helper that uses kwallet and kpassworddialog...

7.5CVSS7.2AI score0.01563EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•42 views

Oracle: Security Advisory (ELSA-2013-0519)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.2CVSS6.5AI score0.00437EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2014/10/15 12:00 a.m.•111 views

openssh security, bug fix, and enhancement update

5.3p1-104 - ignore SIGXFSZ in postauth monitor child 1133906 5.3p1-103 - don't try to generate DSA keys in the init script in FIPS mode 1118735 5.3p1-102 - ignore SIGPIPE in ssh-keyscan 1108836 5.3p1-101 - ssh-add: fix fatal exit when removing card 1042519 5.3p1-100 - fix race in backported...

5.8CVSS0.9AI score0.04751EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•29 views

Oracle Linux 6 : openssh (ELSA-2013-0519)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0519 advisory. 5.3p1-84.1 - Add a 'netcat mode' ssh -W 860809 5.3p1-83 - fix the required authentications patch 869903 5.3p1-82 - check return value of PK11Authenticate in...

6.2CVSS5.6AI score0.00437EPSS
SaveExploits1References2
Rows per page
Query Builder